Loading...
Note: File does not exist in v6.9.4.
1/* SPDX-License-Identifier: GPL-2.0-only */
2/* hermes.h
3 *
4 * Driver core for the "Hermes" wireless MAC controller, as used in
5 * the Lucent Orinoco and Cabletron RoamAbout cards. It should also
6 * work on the hfa3841 and hfa3842 MAC controller chips used in the
7 * Prism I & II chipsets.
8 *
9 * This is not a complete driver, just low-level access routines for
10 * the MAC controller itself.
11 *
12 * Based on the prism2 driver from Absolute Value Systems' linux-wlan
13 * project, the Linux wvlan_cs driver, Lucent's HCF-Light
14 * (wvlan_hcf.c) library, and the NetBSD wireless driver.
15 *
16 * Copyright (C) 2000, David Gibson, Linuxcare Australia.
17 * (C) Copyright David Gibson, IBM Corp. 2001-2003.
18 *
19 * Portions taken from hfa384x.h.
20 * Copyright (C) 1999 AbsoluteValue Systems, Inc. All Rights Reserved.
21 */
22
23#ifndef _HERMES_H
24#define _HERMES_H
25
26/* Notes on locking:
27 *
28 * As a module of low level hardware access routines, there is no
29 * locking. Users of this module should ensure that they serialize
30 * access to the hermes structure, and to the hardware
31*/
32
33#include <linux/if_ether.h>
34#include <linux/io.h>
35
36/*
37 * Limits and constants
38 */
39#define HERMES_ALLOC_LEN_MIN (4)
40#define HERMES_ALLOC_LEN_MAX (2400)
41#define HERMES_LTV_LEN_MAX (34)
42#define HERMES_BAP_DATALEN_MAX (4096)
43#define HERMES_BAP_OFFSET_MAX (4096)
44#define HERMES_PORTID_MAX (7)
45#define HERMES_NUMPORTS_MAX (HERMES_PORTID_MAX + 1)
46#define HERMES_PDR_LEN_MAX (260) /* in bytes, from EK */
47#define HERMES_PDA_RECS_MAX (200) /* a guess */
48#define HERMES_PDA_LEN_MAX (1024) /* in bytes, from EK */
49#define HERMES_SCANRESULT_MAX (35)
50#define HERMES_CHINFORESULT_MAX (8)
51#define HERMES_MAX_MULTICAST (16)
52#define HERMES_MAGIC (0x7d1f)
53
54/*
55 * Hermes register offsets
56 */
57#define HERMES_CMD (0x00)
58#define HERMES_PARAM0 (0x02)
59#define HERMES_PARAM1 (0x04)
60#define HERMES_PARAM2 (0x06)
61#define HERMES_STATUS (0x08)
62#define HERMES_RESP0 (0x0A)
63#define HERMES_RESP1 (0x0C)
64#define HERMES_RESP2 (0x0E)
65#define HERMES_INFOFID (0x10)
66#define HERMES_RXFID (0x20)
67#define HERMES_ALLOCFID (0x22)
68#define HERMES_TXCOMPLFID (0x24)
69#define HERMES_SELECT0 (0x18)
70#define HERMES_OFFSET0 (0x1C)
71#define HERMES_DATA0 (0x36)
72#define HERMES_SELECT1 (0x1A)
73#define HERMES_OFFSET1 (0x1E)
74#define HERMES_DATA1 (0x38)
75#define HERMES_EVSTAT (0x30)
76#define HERMES_INTEN (0x32)
77#define HERMES_EVACK (0x34)
78#define HERMES_CONTROL (0x14)
79#define HERMES_SWSUPPORT0 (0x28)
80#define HERMES_SWSUPPORT1 (0x2A)
81#define HERMES_SWSUPPORT2 (0x2C)
82#define HERMES_AUXPAGE (0x3A)
83#define HERMES_AUXOFFSET (0x3C)
84#define HERMES_AUXDATA (0x3E)
85
86/*
87 * CMD register bitmasks
88 */
89#define HERMES_CMD_BUSY (0x8000)
90#define HERMES_CMD_AINFO (0x7f00)
91#define HERMES_CMD_MACPORT (0x0700)
92#define HERMES_CMD_RECL (0x0100)
93#define HERMES_CMD_WRITE (0x0100)
94#define HERMES_CMD_PROGMODE (0x0300)
95#define HERMES_CMD_CMDCODE (0x003f)
96
97/*
98 * STATUS register bitmasks
99 */
100#define HERMES_STATUS_RESULT (0x7f00)
101#define HERMES_STATUS_CMDCODE (0x003f)
102
103/*
104 * OFFSET register bitmasks
105 */
106#define HERMES_OFFSET_BUSY (0x8000)
107#define HERMES_OFFSET_ERR (0x4000)
108#define HERMES_OFFSET_DATAOFF (0x0ffe)
109
110/*
111 * Event register bitmasks (INTEN, EVSTAT, EVACK)
112 */
113#define HERMES_EV_TICK (0x8000)
114#define HERMES_EV_WTERR (0x4000)
115#define HERMES_EV_INFDROP (0x2000)
116#define HERMES_EV_INFO (0x0080)
117#define HERMES_EV_DTIM (0x0020)
118#define HERMES_EV_CMD (0x0010)
119#define HERMES_EV_ALLOC (0x0008)
120#define HERMES_EV_TXEXC (0x0004)
121#define HERMES_EV_TX (0x0002)
122#define HERMES_EV_RX (0x0001)
123
124/*
125 * Command codes
126 */
127/*--- Controller Commands ----------------------------*/
128#define HERMES_CMD_INIT (0x0000)
129#define HERMES_CMD_ENABLE (0x0001)
130#define HERMES_CMD_DISABLE (0x0002)
131#define HERMES_CMD_DIAG (0x0003)
132
133/*--- Buffer Mgmt Commands ---------------------------*/
134#define HERMES_CMD_ALLOC (0x000A)
135#define HERMES_CMD_TX (0x000B)
136
137/*--- Regulate Commands ------------------------------*/
138#define HERMES_CMD_NOTIFY (0x0010)
139#define HERMES_CMD_INQUIRE (0x0011)
140
141/*--- Configure Commands -----------------------------*/
142#define HERMES_CMD_ACCESS (0x0021)
143#define HERMES_CMD_DOWNLD (0x0022)
144
145/*--- Serial I/O Commands ----------------------------*/
146#define HERMES_CMD_READMIF (0x0030)
147#define HERMES_CMD_WRITEMIF (0x0031)
148
149/*--- Debugging Commands -----------------------------*/
150#define HERMES_CMD_TEST (0x0038)
151
152
153/* Test command arguments */
154#define HERMES_TEST_SET_CHANNEL 0x0800
155#define HERMES_TEST_MONITOR 0x0b00
156#define HERMES_TEST_STOP 0x0f00
157
158/* Authentication algorithms */
159#define HERMES_AUTH_OPEN 1
160#define HERMES_AUTH_SHARED_KEY 2
161
162/* WEP settings */
163#define HERMES_WEP_PRIVACY_INVOKED 0x0001
164#define HERMES_WEP_EXCL_UNENCRYPTED 0x0002
165#define HERMES_WEP_HOST_ENCRYPT 0x0010
166#define HERMES_WEP_HOST_DECRYPT 0x0080
167
168/* Symbol hostscan options */
169#define HERMES_HOSTSCAN_SYMBOL_5SEC 0x0001
170#define HERMES_HOSTSCAN_SYMBOL_ONCE 0x0002
171#define HERMES_HOSTSCAN_SYMBOL_PASSIVE 0x0040
172#define HERMES_HOSTSCAN_SYMBOL_BCAST 0x0080
173
174/*
175 * Frame structures and constants
176 */
177
178#define HERMES_DESCRIPTOR_OFFSET 0
179#define HERMES_802_11_OFFSET (14)
180#define HERMES_802_3_OFFSET (14 + 32)
181#define HERMES_802_2_OFFSET (14 + 32 + 14)
182#define HERMES_TXCNTL2_OFFSET (HERMES_802_3_OFFSET - 2)
183
184#define HERMES_RXSTAT_ERR (0x0003)
185#define HERMES_RXSTAT_BADCRC (0x0001)
186#define HERMES_RXSTAT_UNDECRYPTABLE (0x0002)
187#define HERMES_RXSTAT_MIC (0x0010) /* Frame contains MIC */
188#define HERMES_RXSTAT_MACPORT (0x0700)
189#define HERMES_RXSTAT_PCF (0x1000) /* Frame was received in CF period */
190#define HERMES_RXSTAT_MIC_KEY_ID (0x1800) /* MIC key used */
191#define HERMES_RXSTAT_MSGTYPE (0xE000)
192#define HERMES_RXSTAT_1042 (0x2000) /* RFC-1042 frame */
193#define HERMES_RXSTAT_TUNNEL (0x4000) /* bridge-tunnel encoded frame */
194#define HERMES_RXSTAT_WMP (0x6000) /* Wavelan-II Management Protocol frame */
195
196/* Shift amount for key ID in RXSTAT and TXCTRL */
197#define HERMES_MIC_KEY_ID_SHIFT 11
198
199struct hermes_tx_descriptor {
200 __le16 status;
201 __le16 reserved1;
202 __le16 reserved2;
203 __le32 sw_support;
204 u8 retry_count;
205 u8 tx_rate;
206 __le16 tx_control;
207} __packed;
208
209#define HERMES_TXSTAT_RETRYERR (0x0001)
210#define HERMES_TXSTAT_AGEDERR (0x0002)
211#define HERMES_TXSTAT_DISCON (0x0004)
212#define HERMES_TXSTAT_FORMERR (0x0008)
213
214#define HERMES_TXCTRL_TX_OK (0x0002) /* ?? interrupt on Tx complete */
215#define HERMES_TXCTRL_TX_EX (0x0004) /* ?? interrupt on Tx exception */
216#define HERMES_TXCTRL_802_11 (0x0008) /* We supply 802.11 header */
217#define HERMES_TXCTRL_MIC (0x0010) /* 802.3 + TKIP */
218#define HERMES_TXCTRL_MIC_KEY_ID (0x1800) /* MIC Key ID mask */
219#define HERMES_TXCTRL_ALT_RTRY (0x0020)
220
221/* Inquiry constants and data types */
222
223#define HERMES_INQ_TALLIES (0xF100)
224#define HERMES_INQ_SCAN (0xF101)
225#define HERMES_INQ_CHANNELINFO (0xF102)
226#define HERMES_INQ_HOSTSCAN (0xF103)
227#define HERMES_INQ_HOSTSCAN_SYMBOL (0xF104)
228#define HERMES_INQ_LINKSTATUS (0xF200)
229#define HERMES_INQ_SEC_STAT_AGERE (0xF202)
230
231struct hermes_tallies_frame {
232 __le16 TxUnicastFrames;
233 __le16 TxMulticastFrames;
234 __le16 TxFragments;
235 __le16 TxUnicastOctets;
236 __le16 TxMulticastOctets;
237 __le16 TxDeferredTransmissions;
238 __le16 TxSingleRetryFrames;
239 __le16 TxMultipleRetryFrames;
240 __le16 TxRetryLimitExceeded;
241 __le16 TxDiscards;
242 __le16 RxUnicastFrames;
243 __le16 RxMulticastFrames;
244 __le16 RxFragments;
245 __le16 RxUnicastOctets;
246 __le16 RxMulticastOctets;
247 __le16 RxFCSErrors;
248 __le16 RxDiscards_NoBuffer;
249 __le16 TxDiscardsWrongSA;
250 __le16 RxWEPUndecryptable;
251 __le16 RxMsgInMsgFragments;
252 __le16 RxMsgInBadMsgFragments;
253 /* Those last are probably not available in very old firmwares */
254 __le16 RxDiscards_WEPICVError;
255 __le16 RxDiscards_WEPExcluded;
256} __packed;
257
258/* Grabbed from wlan-ng - Thanks Mark... - Jean II
259 * This is the result of a scan inquiry command */
260/* Structure describing info about an Access Point */
261struct prism2_scan_apinfo {
262 __le16 channel; /* Channel where the AP sits */
263 __le16 noise; /* Noise level */
264 __le16 level; /* Signal level */
265 u8 bssid[ETH_ALEN]; /* MAC address of the Access Point */
266 __le16 beacon_interv; /* Beacon interval */
267 __le16 capabilities; /* Capabilities */
268 __le16 essid_len; /* ESSID length */
269 u8 essid[32]; /* ESSID of the network */
270 u8 rates[10]; /* Bit rate supported */
271 __le16 proberesp_rate; /* Data rate of the response frame */
272 __le16 atim; /* ATIM window time, Kus (hostscan only) */
273} __packed;
274
275/* Same stuff for the Lucent/Agere card.
276 * Thanks to h1kari <h1kari AT dachb0den.com> - Jean II */
277struct agere_scan_apinfo {
278 __le16 channel; /* Channel where the AP sits */
279 __le16 noise; /* Noise level */
280 __le16 level; /* Signal level */
281 u8 bssid[ETH_ALEN]; /* MAC address of the Access Point */
282 __le16 beacon_interv; /* Beacon interval */
283 __le16 capabilities; /* Capabilities */
284 /* bits: 0-ess, 1-ibss, 4-privacy [wep] */
285 __le16 essid_len; /* ESSID length */
286 u8 essid[32]; /* ESSID of the network */
287} __packed;
288
289/* Moustafa: Scan structure for Symbol cards */
290struct symbol_scan_apinfo {
291 u8 channel; /* Channel where the AP sits */
292 u8 unknown1; /* 8 in 2.9x and 3.9x f/w, 0 otherwise */
293 __le16 noise; /* Noise level */
294 __le16 level; /* Signal level */
295 u8 bssid[ETH_ALEN]; /* MAC address of the Access Point */
296 __le16 beacon_interv; /* Beacon interval */
297 __le16 capabilities; /* Capabilities */
298 /* bits: 0-ess, 1-ibss, 4-privacy [wep] */
299 __le16 essid_len; /* ESSID length */
300 u8 essid[32]; /* ESSID of the network */
301 __le16 rates[5]; /* Bit rate supported */
302 __le16 basic_rates; /* Basic rates bitmask */
303 u8 unknown2[6]; /* Always FF:FF:FF:FF:00:00 */
304 u8 unknown3[8]; /* Always 0, appeared in f/w 3.91-68 */
305} __packed;
306
307union hermes_scan_info {
308 struct agere_scan_apinfo a;
309 struct prism2_scan_apinfo p;
310 struct symbol_scan_apinfo s;
311};
312
313/* Extended scan struct for HERMES_INQ_CHANNELINFO.
314 * wl_lkm calls this an ACS scan (Automatic Channel Select).
315 * Keep out of union hermes_scan_info because it is much bigger than
316 * the older scan structures. */
317struct agere_ext_scan_info {
318 __le16 reserved0;
319
320 u8 noise;
321 u8 level;
322 u8 rx_flow;
323 u8 rate;
324 __le16 reserved1[2];
325
326 __le16 frame_control;
327 __le16 dur_id;
328 u8 addr1[ETH_ALEN];
329 u8 addr2[ETH_ALEN];
330 u8 bssid[ETH_ALEN];
331 __le16 sequence;
332 u8 addr4[ETH_ALEN];
333
334 __le16 data_length;
335
336 /* Next 3 fields do not get filled in. */
337 u8 daddr[ETH_ALEN];
338 u8 saddr[ETH_ALEN];
339 __le16 len_type;
340
341 __le64 timestamp;
342 __le16 beacon_interval;
343 __le16 capabilities;
344 u8 data[];
345} __packed;
346
347#define HERMES_LINKSTATUS_NOT_CONNECTED (0x0000)
348#define HERMES_LINKSTATUS_CONNECTED (0x0001)
349#define HERMES_LINKSTATUS_DISCONNECTED (0x0002)
350#define HERMES_LINKSTATUS_AP_CHANGE (0x0003)
351#define HERMES_LINKSTATUS_AP_OUT_OF_RANGE (0x0004)
352#define HERMES_LINKSTATUS_AP_IN_RANGE (0x0005)
353#define HERMES_LINKSTATUS_ASSOC_FAILED (0x0006)
354
355struct hermes_linkstatus {
356 __le16 linkstatus; /* Link status */
357} __packed;
358
359struct hermes_response {
360 u16 status, resp0, resp1, resp2;
361};
362
363/* "ID" structure - used for ESSID and station nickname */
364struct hermes_idstring {
365 __le16 len;
366 __le16 val[16];
367} __packed;
368
369struct hermes_multicast {
370 u8 addr[HERMES_MAX_MULTICAST][ETH_ALEN];
371} __packed;
372
373/* Timeouts */
374#define HERMES_BAP_BUSY_TIMEOUT (10000) /* In iterations of ~1us */
375
376struct hermes;
377
378/* Functions to access hardware */
379struct hermes_ops {
380 int (*init)(struct hermes *hw);
381 int (*cmd_wait)(struct hermes *hw, u16 cmd, u16 parm0,
382 struct hermes_response *resp);
383 int (*init_cmd_wait)(struct hermes *hw, u16 cmd,
384 u16 parm0, u16 parm1, u16 parm2,
385 struct hermes_response *resp);
386 int (*allocate)(struct hermes *hw, u16 size, u16 *fid);
387 int (*read_ltv)(struct hermes *hw, int bap, u16 rid, unsigned buflen,
388 u16 *length, void *buf);
389 int (*read_ltv_pr)(struct hermes *hw, int bap, u16 rid,
390 unsigned buflen, u16 *length, void *buf);
391 int (*write_ltv)(struct hermes *hw, int bap, u16 rid,
392 u16 length, const void *value);
393 int (*bap_pread)(struct hermes *hw, int bap, void *buf, int len,
394 u16 id, u16 offset);
395 int (*bap_pwrite)(struct hermes *hw, int bap, const void *buf,
396 int len, u16 id, u16 offset);
397 int (*read_pda)(struct hermes *hw, __le16 *pda,
398 u32 pda_addr, u16 pda_len);
399 int (*program_init)(struct hermes *hw, u32 entry_point);
400 int (*program_end)(struct hermes *hw);
401 int (*program)(struct hermes *hw, const char *buf,
402 u32 addr, u32 len);
403 void (*lock_irqsave)(spinlock_t *lock, unsigned long *flags);
404 void (*unlock_irqrestore)(spinlock_t *lock, unsigned long *flags);
405 void (*lock_irq)(spinlock_t *lock);
406 void (*unlock_irq)(spinlock_t *lock);
407};
408
409/* Basic control structure */
410struct hermes {
411 void __iomem *iobase;
412 int reg_spacing;
413#define HERMES_16BIT_REGSPACING 0
414#define HERMES_32BIT_REGSPACING 1
415 u16 inten; /* Which interrupts should be enabled? */
416 bool eeprom_pda;
417 const struct hermes_ops *ops;
418 void *priv;
419};
420
421/* Register access convenience macros */
422#define hermes_read_reg(hw, off) \
423 (ioread16((hw)->iobase + ((off) << (hw)->reg_spacing)))
424#define hermes_write_reg(hw, off, val) \
425 (iowrite16((val), (hw)->iobase + ((off) << (hw)->reg_spacing)))
426#define hermes_read_regn(hw, name) hermes_read_reg((hw), HERMES_##name)
427#define hermes_write_regn(hw, name, val) \
428 hermes_write_reg((hw), HERMES_##name, (val))
429
430/* Function prototypes */
431void hermes_struct_init(struct hermes *hw, void __iomem *address,
432 int reg_spacing);
433
434/* Inline functions */
435
436static inline int hermes_present(struct hermes *hw)
437{
438 return hermes_read_regn(hw, SWSUPPORT0) == HERMES_MAGIC;
439}
440
441static inline void hermes_set_irqmask(struct hermes *hw, u16 events)
442{
443 hw->inten = events;
444 hermes_write_regn(hw, INTEN, events);
445}
446
447static inline int hermes_enable_port(struct hermes *hw, int port)
448{
449 return hw->ops->cmd_wait(hw, HERMES_CMD_ENABLE | (port << 8),
450 0, NULL);
451}
452
453static inline int hermes_disable_port(struct hermes *hw, int port)
454{
455 return hw->ops->cmd_wait(hw, HERMES_CMD_DISABLE | (port << 8),
456 0, NULL);
457}
458
459/* Initiate an INQUIRE command (tallies or scan). The result will come as an
460 * information frame in __orinoco_ev_info() */
461static inline int hermes_inquire(struct hermes *hw, u16 rid)
462{
463 return hw->ops->cmd_wait(hw, HERMES_CMD_INQUIRE, rid, NULL);
464}
465
466#define HERMES_BYTES_TO_RECLEN(n) ((((n) + 1) / 2) + 1)
467#define HERMES_RECLEN_TO_BYTES(n) (((n) - 1) * 2)
468
469/* Note that for the next two, the count is in 16-bit words, not bytes */
470static inline void hermes_read_words(struct hermes *hw, int off,
471 void *buf, unsigned count)
472{
473 off = off << hw->reg_spacing;
474 ioread16_rep(hw->iobase + off, buf, count);
475}
476
477static inline void hermes_write_bytes(struct hermes *hw, int off,
478 const char *buf, unsigned count)
479{
480 off = off << hw->reg_spacing;
481 iowrite16_rep(hw->iobase + off, buf, count >> 1);
482 if (unlikely(count & 1))
483 iowrite8(buf[count - 1], hw->iobase + off);
484}
485
486static inline void hermes_clear_words(struct hermes *hw, int off,
487 unsigned count)
488{
489 unsigned i;
490
491 off = off << hw->reg_spacing;
492
493 for (i = 0; i < count; i++)
494 iowrite16(0, hw->iobase + off);
495}
496
497#define HERMES_READ_RECORD(hw, bap, rid, buf) \
498 (hw->ops->read_ltv((hw), (bap), (rid), sizeof(*buf), NULL, (buf)))
499#define HERMES_READ_RECORD_PR(hw, bap, rid, buf) \
500 (hw->ops->read_ltv_pr((hw), (bap), (rid), sizeof(*buf), NULL, (buf)))
501#define HERMES_WRITE_RECORD(hw, bap, rid, buf) \
502 (hw->ops->write_ltv((hw), (bap), (rid), \
503 HERMES_BYTES_TO_RECLEN(sizeof(*buf)), (buf)))
504
505static inline int hermes_read_wordrec(struct hermes *hw, int bap, u16 rid,
506 u16 *word)
507{
508 __le16 rec;
509 int err;
510
511 err = HERMES_READ_RECORD(hw, bap, rid, &rec);
512 *word = le16_to_cpu(rec);
513 return err;
514}
515
516static inline int hermes_read_wordrec_pr(struct hermes *hw, int bap, u16 rid,
517 u16 *word)
518{
519 __le16 rec;
520 int err;
521
522 err = HERMES_READ_RECORD_PR(hw, bap, rid, &rec);
523 *word = le16_to_cpu(rec);
524 return err;
525}
526
527static inline int hermes_write_wordrec(struct hermes *hw, int bap, u16 rid,
528 u16 word)
529{
530 __le16 rec = cpu_to_le16(word);
531 return HERMES_WRITE_RECORD(hw, bap, rid, &rec);
532}
533
534#endif /* _HERMES_H */